Overview

Use Cases

BambooCloud IDaaS Identity Cloud manages enterprise employee identity information throughout its full lifecycle. Data synchronization is divided into two stages overall: in the first stage, organization and user information from the enterprise's authoritative data source HR system is automatically synchronized to the IDaaS user pool; in the second stage, after the enterprise administrator authorizes users to access applications, the IDaaS Identity Cloud synchronizes the authorized application organizations and application accounts (users) to downstream application systems.

After completing the first stage, how to achieve the second stage of synchronizing authorized organizations and users to downstream applications? This chapter focuses on how to synchronize enterprise employee identity information to application systems.

• IDaaS has pre-integrated identity synchronization connectors (Connectors) for many mainstream application systems in the market. With simple parameter configuration of the Connector, it is ready to use out of the box, and changes to organization and user information can be automatically synchronized to downstream application systems without any code modification. For details, refer to App Integration -> Find the application you are using.
• When the application system you are using is not in our pre-integrated application list (such as systems independently developed by R&D teams), IDaaS provides an identity synchronization protocol based on event callbacks. Developers can develop and debug according to the synchronization protocol interfaces provided by the platform to achieve automatic data linkage of identity information from IDaaS to application systems.

What is an Application Connector

To reduce the integration difficulty and cycle of customer application systems, the IDaaS platform has accumulated years of application system integration experience and performed product-level adaptation and integration for mainstream office systems and SaaS commercial application systems, continuously enriching and improving the application ecosystem of the IDaaS Identity Cloud platform. Leveraging the identity synchronization Connector, when users experience onboarding, transfer, adjustment, and offboarding events, changes in the enterprise HR system are automatically synchronized to downstream application systems without requiring developers to perform any code modification or joint debugging, achieving zero-cost upstream and downstream data linkage.

What is Event Callback?

Event callback is an active push message notification mode (Push). IDaaS actively pushes event messages to application systems. Each application system that needs to receive message event notifications must register a URL address to receive messages in the IDaaS platform. After the enterprise administrator authorizes the application system's organization and user permissions in the IDaaS platform, the IDaaS platform pushes the changed information to the application system immediately. After receiving the event message, the application system verifies the signature and decrypts the organization or user information according to the protocol specifications and stores it in its own system database.

Which Method Should We Choose?

Integration Method	Application Scenario	Description
Application Connector	Limited to the IDaaS pre-integrated application ecosystem. The application system supports standard open identity interfaces, and both systems perform product-level adaptation and integration. This method cannot be used when the application system is not within the IDaaS application ecosystem.	No code modification needed; simple configuration; ready to use out of the box.
Event Callback	Mainly used for enterprise self-developed business systems where system openness is relatively weak and standardization is not high.	Requires simple code development.